$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft File: 387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft (raw, json) Hash identifier: 2Xoq/qZUJPVxx5un9vlWqbQYI+MjF5JSZuxa4+G+noU= Subject key identifier: 75:49:A6:E1:54:2A:28:E6:2C:46:90:21:FC:17:5F:68:72:BB:41:9E Authority key identifier: 38:7D:A9:5F:F9:9D:3F:CB:2B:BB:D2:F3:B2:29:D9:F3:37:2D:D3:B8 Certificate issuer: /CN=387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8 Certificate serial: 7ADCE08BCFDA61F664647160E83848C178C995E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:54:57 +0000 Manifest this update: Tue 12 May 2026 21:49:57 +0000 Manifest next update: Wed 13 May 2026 23:31:57 +0000 Files and hashes: 1: 3130332e39392e3133362e302f32342d3234203d3e20313531353735.roa (hash: S6GOyjGvuJioIHLVuYqgKhP5jh9zLHefQ/VHuPP8g0o=) 2: 387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl (hash: S72959akG34xxflpBOChW5hUxy4xXjj73lpLhH9VJRE=) 3: 3130332e39392e3133362e302f32332d3233203d3e20313531353735.roa (hash: MxOD/5AuASqElHlVy5TYYuw3oWmINBBbMOjEzQsGf+o=) 4: 3130332e39392e3133372e302f32342d3234203d3e20313531353735.roa (hash: WzpVY5ZsxXo9ncFEks5zrp0y9Wobyt/PfJcmMClmLsQ=) 5: 323030313a6466343a3763303a3a2f34382d3438203d3e20313531353735.roa (hash: eZupa4yD5dYmRchDIoQ9Vr1OSpDO1UCvdkhlGFp59RU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:dc:e0:8b:cf:da:61:f6:64:64:71:60:e8:38:48:c1:78:c9:95:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8 Validity Not Before: May 12 21:49:57 2026 GMT Not After : May 13 23:31:57 2026 GMT Subject: CN=7549A6E1542A28E62C469021FC175F6872BB419E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:42:c8:89:08:30:67:8c:6e:0d:86:a7:f2:99: 5d:ac:46:30:c0:b1:60:d4:93:39:1c:4c:f8:9e:2f: 46:1d:dd:c2:cd:0d:a5:49:8f:78:10:06:f6:05:e5: ea:e7:28:21:46:4c:45:f3:71:65:64:71:cb:52:e8: 36:19:28:55:b3:e1:53:6a:cd:1f:d9:45:38:90:ea: 9b:41:b8:1b:c0:af:17:c7:da:a4:09:ae:c8:b5:96: 39:7c:3e:f4:fa:3f:b2:1a:61:31:55:8a:06:89:52: 25:00:99:1d:3c:04:0a:20:26:c3:1a:16:7a:cb:c3: 9b:7a:31:bb:93:38:8d:be:7e:cf:11:25:1c:64:2b: 5c:6c:f2:6a:f4:fe:fe:e3:76:10:00:31:ca:78:af: dd:72:bd:de:27:58:03:eb:e7:a2:96:75:a4:3c:ed: a5:d5:49:12:26:18:cd:af:1e:f4:c7:94:fa:a8:6d: b2:5b:ca:b3:9c:2d:5f:5f:b5:c5:db:31:a8:21:a9: 69:ff:bd:7f:b7:da:ef:bb:9e:68:24:ad:46:22:69: 2c:f0:f2:3a:f0:31:70:19:85:a1:0a:ec:f1:41:82: 0f:6d:50:fa:47:a4:e6:7e:32:77:6b:b9:3b:54:21: 30:af:36:c8:a4:98:dc:a2:ce:7a:da:e3:be:76:8d: 57:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:49:A6:E1:54:2A:28:E6:2C:46:90:21:FC:17:5F:68:72:BB:41:9E X509v3 Authority Key Identifier: keyid:38:7D:A9:5F:F9:9D:3F:CB:2B:BB:D2:F3:B2:29:D9:F3:37:2D:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:d1:e5:22:18:b5:8e:3a:91:58:59:39:b8:fd:cb:fe:ee:e1: b9:db:e2:ce:5d:97:74:fc:73:89:57:d7:8d:d4:36:cf:ef:8a: a7:db:14:f3:e6:78:6d:0d:0b:ba:af:79:a2:cf:66:41:8f:f0: c2:7a:c3:ed:a7:4b:5b:a6:66:55:4f:f5:90:db:ad:35:54:a0: 68:72:47:a7:ed:7c:78:8a:46:20:a5:ab:dd:e6:be:9c:8e:ac: 32:da:1f:e8:47:9a:38:17:b1:44:97:f5:e2:1e:16:1a:38:4c: f6:fd:aa:20:40:8b:65:c0:67:d6:79:5a:27:6b:7d:43:10:63: 34:71:ad:ff:dd:a4:00:d7:27:1d:c4:f6:b2:65:c0:f0:39:9e: f0:34:1a:7e:ce:e1:ee:d0:65:46:91:02:90:ff:53:56:f0:ae: 68:df:57:c6:2d:29:45:cc:a6:27:81:ee:de:52:96:e2:bf:b0: 13:fd:07:ed:5c:2a:09:2c:a7:5c:5e:b5:e7:e9:30:d7:87:f5: 20:7f:9c:7d:7c:29:dc:1a:ae:c9:00:27:99:99:e7:de:b0:78: 0e:c9:01:68:a6:08:4f:38:e8:34:75:b8:c4:23:de:2c:b4:16: 85:63:72:5f:93:b8:51:03:f1:56:3e:96:ee:19:ea:77:84:73: b1:0a:06:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUetzgi8/aYfZkZHFg6DhIwXjJleMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg3REE5NUZGOTlEM0ZDQjJCQkJEMkYzQjIyOUQ5RjMz NzJERDNCODAeFw0yNjA1MTIyMTQ5NTdaFw0yNjA1MTMyMzMxNTdaMDMxMTAvBgNV BAMTKDc1NDlBNkUxNTQyQTI4RTYyQzQ2OTAyMUZDMTc1RjY4NzJCQjQxOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVQsiJCDBnjG4NhqfymV2sRjDA sWDUkzkcTPieL0Yd3cLNDaVJj3gQBvYF5ernKCFGTEXzcWVkcctS6DYZKFWz4VNq zR/ZRTiQ6ptBuBvArxfH2qQJrsi1ljl8PvT6P7IaYTFVigaJUiUAmR08BAogJsMa FnrLw5t6MbuTOI2+fs8RJRxkK1xs8mr0/v7jdhAAMcp4r91yvd4nWAPr56KWdaQ8 7aXVSRImGM2vHvTHlPqobbJbyrOcLV9ftcXbMaghqWn/vX+32u+7nmgkrUYiaSzw 8jrwMXAZhaEK7PFBgg9tUPpHpOZ+MndruTtUITCvNsikmNyiznra4752jVflAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdUmm4VQqKOYsRpAh/BdfaHK7QZ4wHwYDVR0j BBgwFoAUOH2pX/mdP8sru9LzsinZ8zct07gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMyODBhZjMtYWExZC00MjcxLThjMDYtYTNmYTI4ODk4NDI2LzAvMzg3REE5NUZG OTlEM0ZDQjJCQkJEMkYzQjIyOUQ5RjMzNzJERDNCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODdEQTk1RkY5OUQzRkNCMkJCQkQyRjNCMjI5RDlGMzM3MkRE M0I4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMyODBhZjMtYWExZC00MjcxLThj MDYtYTNmYTI4ODk4NDI2LzAvMzg3REE5NUZGOTlEM0ZDQjJCQkJEMkYzQjIyOUQ5 RjMzNzJERDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALfR5SIYtY46kVhZObj9y/7u4bnb4s5dl3T8 c4lX143UNs/viqfbFPPmeG0NC7qveaLPZkGP8MJ6w+2nS1umZlVP9ZDbrTVUoGhy R6ftfHiKRiClq93mvpyOrDLaH+hHmjgXsUSX9eIeFho4TPb9qiBAi2XAZ9Z5Widr fUMQYzRxrf/dpADXJx3E9rJlwPA5nvA0Gn7O4e7QZUaRApD/U1bwrmjfV8YtKUXM pieB7t5SluK/sBP9B+1cKgksp1xetefpMNeH9SB/nH18KdwarskAJ5mZ596weA7J AWimCE846DR1uMQj3iy0FoVjcl+TuFED8VY+lu4Z6neEc7EKBhU= -----END CERTIFICATE-----Generated at Wed May 13 01:40:57 2026 by rpki-client